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ESTABLISH FIRST COMMUNICATION BETWEEN FIRST AND SECOND NETWORK DEVICES 
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NEGOTIATE SECURITY ASSOCIATION FOR FIRST COMMUNICATION 
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PASS SECURITY INFORMATION CORRESPONDING TO SECURITY ASSOCIATION TO REDUNDANCY HANDLER 



ENABLE REPLAY PREVENTION FOR FIRST COMMUNICATION 
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SET INITIAL SEQUENCE NUMBER FOR FIRST COMMUNICATION TO 0 
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SET SEQUENCE NUMBER LIMIT FOR FIRST COMMUNICATION TO X 
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FIG. 2B 




ENABLE REPLAY PREVENTION FOR SECOND COMMUNICATION 
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SET INITIAL SEQUENCE NUMBER FOR SECOND COMMUNICATION TO X+1 



SET SEQUENCE NUMBER LIMIT FOR SECOND COMMUNICATION TO MAX 
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FIG. 2C 




FIG. 5A 
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ROUTE-SERVER NEGOTIATES SECURITY ASSOCIATIONS FOR EACH ACTIVE BLADE 
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ROUTE-SERVER PASSES TO EACH ACTIVE BLADE SECURITY 
INFORMATION CORRESPONDING TO ITS SECURITY ASSOCIATION 



ROUTE-SERVER PASSES TO SWITCH SECURITY PARAMETER INDEXES FOR EACH ACTIVE BLADE 



REPLAY PREVENTION IS ENABLED FOR EACH ACTIVE BLADE 
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SET INITIAL SEQUENCE NUMBER FOR EACH ACTIVE BLADE TO 0 




SET SEQUENCE NUMBER LIMIT FOR EACH BLADE TO X 
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FIG. 5B 




PASS SECURITY INFORMATION FOR FAILED BLADE TO STANDBY BLADE AND IMPLEMENT 
SAME SECURITY ASSOCIATION FOR STANDBY BLADE AS FAILED BLADE 



I 



ASSIGN SECURITY PARAMETER INDEX OF FAILED BLADE TO STANDBY BLADE 
AND PASS NEW SWITCHING INFORMATION TO SWITCH 
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ENABLE REPLAY PREVENTION FOR STANDBY BLADE 




SET SEQUENCE NUMBER LIMIT FOR STANDBY BLADE TO MAX 



CHECK SEQUENCE NUMBERS FOR STANDBY BLADE 
AS COMMUNICATION PROCEEDS 





NEGOTIATE ANEW 
SECURITY ASSOCIATION 
FOR STANDBY BLADE 
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FIG. 5C 
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CHECK SEQUENCE NUMBERS FOR EACH ACTIVE BLADE 
AS COMMUNICATION PROCEEDS 




